CVE-2006-5968: Medium severity Alt-N MDaemon vulnerability
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5968?
CVE-2006-5968 is considered a high severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2006-5968?
To mitigate CVE-2006-5968, ensure that the MDaemon application folder has secure permissions to prevent unauthorized file creation.
Which versions of MDaemon are affected by CVE-2006-5968?
MDaemon versions 9.0.5, 9.0.6, 9.51, and 9.53 are explicitly affected by CVE-2006-5968.
What types of attacks can CVE-2006-5968 facilitate?
CVE-2006-5968 can facilitate local privilege escalation attacks through the execution of malicious DLL files.
Is there a known exploit for CVE-2006-5968?
Yes, CVE-2006-5968 may be exploited locally by creating malicious libraries in the MDaemon application folder.